An intelligent system, which perfectly understands natural language, immediately feeds on a huge amount of data and has an answer to practically any question. ChatGPT is so good —especially in its latest version, GPT-4— that it only took a few months for the alarm bells to go off: How far can its influence go? Beyond moral debates, the other great concern that ChatGPT arouses is its not very transparent management of the information it processes.
“We don’t know what they really do with the data,” warns Borja Adsuara, an expert lawyer in digital law, “and not knowing what they do with the data is already a risk in itself.” Federico Vadillo, an Akamai security expert, shares the same opinion: “The use of ChatGPT presents risks in terms of data protection and regulatory compliance, especially in relation to the General Data Protection Regulation, the GDPR.” This expert goes further by warning that this “unauthorized” personal data could “be transferred outside the European Union.”
The adventure of deleting personal data
“Systems based on artificial intelligence (AI) often behave like a black box: we know what happens at the end of the process, but we don’t know how the software learns and makes decisions”, warns Adrián Moreno, an expert in cybersecurity. “This phenomenon poses challenges of understanding, control and ethics. That is why it is convenient to establish a regulatory framework in order to address these challenges to allow a responsible and safe development and use of AI ”, he adds.
Moreno recalls that “article 15 of the GDPR establishes that ‘the interested party shall have the right to obtain confirmation from the data controller as to whether or not personal data concerning him or her is being processed'”, and in this sense, the way in which the systems AI-based use of information is “a source of concern”.
This is, after completing a complex form, in which it is irrefutably demonstrated (even with screenshots) that the system is offering information about oneself and the reasons for requesting its removal. This document must be completed with the real data of the interested party, who, in addition, must “swear” in writing to the veracity of what is stated. And to make things even worse, if possible, this form informs the user that the information filled in could be checked against other sources to verify its veracity.
You can follow THE COUNTRY Technology in Facebook and Twitter or sign up here to receive our weekly newsletter.